intellectual property protection practices when · pdf fileintellectual property protection...

BOEING is a trademark of Boeing Management Company

Copyright © 2014 Boeing. All rights reserved.

Copyright © 2014 Northrop Grumman Corporation. All rights reserved.

GPDIS_2015.ppt | 1

Intellectual Property

Protection Practices

when Exchanging

Data

Brian Schouten PROSTEP Inc

Global Product Data Interoperability Summit | 2015




GPDIS_2015.ppt | 2

Intellectual Property Protection Practices when Exchanging

Data

• Take Away Topics • An awareness of various ways that data may be

leaking form your organization

• Simple and affordable steps to increase the utilization

of secure data exchange

• Options for deeper supplier integration scenarios





GPDIS_2015.ppt | 3

Data Exchange / IP Protection





GPDIS_2015.ppt | 4

Data Exchange / Collaboration

• Getting the Right Information • Correct Version / Iteration • Appropriate IP exposure • Correct Configuration

• To the Right Person • Controlled Access • Audit Reports

• At the Right Time • Minimal Lag Time • In the Field Updates

• In the Right Format • Purpose Driven

• Globally Accessible • Via Internet, OFTP, or other standards based protocols





GPDIS_2015.ppt | 5

Typical Challenges Typical Concerns





GPDIS_2015.ppt | 6

Today’s Methods Audience Survey





GPDIS_2015.ppt | 7

Data Exchange / IP Protection





GPDIS_2015.ppt | 8

Email & FTP – Really ?

• Simple Mail Transfer Protocol (SMTP) is an Internet

standard for electronic mail (e-mail) transmission across

Internet Protocol (IP) networks. SMTP was first defined by

RFC 821 in 1982 and grew out of standards developed

during the 1970s.

• File Transfer Protocol (FTP) is a standard network protocol

used to transfer files from one host to another host over a

TCP-based network, such as the Internet. FTP is built on a

client-server architecture and uses separate control and

data connections between the client and the server

typically with clear text authentication and published as

RFC 114 in 1971

Paraphrased from <http://en.wikipedia.org/wiki/FTP>

How old are your protocals?

http://en.wikipedia.org/wiki/FTP





GPDIS_2015.ppt | 9

CONVENIENCE!

Why do we keep doing it?

“increasing

convenience almost

always reduces

security”

…. but does it really have to be that way?





GPDIS_2015.ppt | 10

Standalone “Simple” Portal Solutions

Supplier / Consumer OEM / Sponsor

Standalone Portal Solutions

Quick / Easy to Deploy

Simple Administration

Affordable (sometimes free)

Good Basic Security (outside of email)

Often Hosted outside of company *

Not Integrated (Swivel Chair) Solution –

Less Convenience (must be logged in and online) –

Can be hard to customize –

*Monthly Fees for users / volume add up quickly –





GPDIS_2015.ppt | 11

“Advanced” Portal Concepts

Automated Processes

Upload and download with Agent,

installed at the user's desktop

Agent

Location 2

Database FileVault

Server

CAD Converter

Gateway KeyStore

Server Location

Main OEM Server Location - Authentication

- Encrypted data storage

- PKI-Management

- User right definitions

- Processing control

- Logging

- E-Mail notification

- Data routing

- Data conversion, …

Gateway

Location 3

Batch Mode

Data are temporary stored quickly

in local network drive

Transfer of data to run completely

in a batch mode Gateway

FileVault

CAD Converter

Location 4 Advanced Functionality

Encryption

Local File Vaults

Local conversion of data

WAN /

Internet

Manual Processes

User sign on over WEB-Browser and up- or

download data manually, interactively

Location 1

WAN /

Internet

Robot

Partner

Internet

System to System

Automated / Integrated

Remote Data Vaults

Supplier signs in over WEB-Browser

Data is uploaded from a data vault

close to the end user

Supplier

Internet

Advanced Portal Solutions

Deeply integrated into systems and processes

Fully automated and work behind the scenes

Installed in the enterprise or the cloud

Centralized or Distributed

Designed for customization

Upfront Infrastructure Costs –

Upfront Planning Requirement –

Administrative Overhead –





GPDIS_2015.ppt | 12

Convenient and Secure ?

• Secure exchange needs to start as close possible to the end users daily working environment • Desktop Integration • Email Integration • PLM Integration • Purchasing / Bid Systems

• If users have to leave their default working environment to send secure information, they are less likely to use the approved solution.





GPDIS_2015.ppt | 13

Common

Secure

Portal

Solution

Web-B

row

ser

GU

I

Windows Desktop

Plug-In (“Send To”)

Windows Explorer

Integration

AGENT

ROBOTs

ROBOT

(batch mode)

OFTP/ENGDAT OFTP1/2

(batch mode)

Access from anywhere / any system

Videos-Clients/Browser.mp4

Videos-Clients/Outlook2GlobalX_1.wmv

Videos-Clients/GlobalX-App.mov

Videos-Clients/Agent.mp4

Videos-Clients/GlobalX-TcE-Integration_engl.wmv





GPDIS_2015.ppt | 14

Email Secure Send Demo

• Email (Outlook) Secure DX Integration Demo • Internal User Initiates an email in Outlook • Size / Type of Data trips a switch this is secure / large data • Data is sent to Secure DX Server (not the exchange server)

• THE END USER HAS NOT CHANGED ANY PRACTICES

• ZERO TRAINING • POLICIES ARE 100% ENFORCED WITH POLICIES • STOPS EMAIL IP LEAKAGE !

• Audit Logs are kept separate from Clients and Mail Servers

• Data is always encrypted before transport outside of enterprise

• No data Load on Mail Server





GPDIS_2015.ppt | 15

Email Secure Receive

• Email (Outlook) Secure DX Integration Demo

• External user Receives an Outlook Email

• User Clicks on Download Data • Secure DX Link is invoked

• Data is downloaded from the DX Portal (not Exchange)

• and decrypted for the recipient all from with in Outlook

• The end user has only one minor obvious change

• Zero (0.01%) self training





GPDIS_2015.ppt | 16

Desktop Integration (Drop Zones)





GPDIS_2015.ppt | 17

Scaling up Complexity with back end systems integration and automation

• Dealing with Engineering Data (of course) plus • ERP Data

• MRP Data

• Bids

• Financials

• More

• Centralized Reporting on all confidential Information





GPDIS_2015.ppt | 18

Integrated Solutions

Requirements

ERP

PLM

Other

………...

Purchasing





GPDIS_2015.ppt | 19

Purpose Driven DX

You don’t have to give away the corporate jewels

Systematic and Automatic processes can transform you data prior

to data exchange to allow only the minimal information required

for the recipient to do their job.

Data can be “dumbed down” with history, features and other IP

related elements removed.

Each recipient can have a “data profile” that determines what they

can receive

Neutral formats can be created, on the fly

NX

JT

STEP

3DPDF

Etc





GPDIS_2015.ppt | 20

DRM Controlled Documents

• DRM Protected Documents • Limit Access to named users • Revoke Rights in the field • Force Updates to Latest

Document Versions • Authentic via PKI, AD, LDAP,

RSA, Others • Limit Document Features

• Read Only • Save • Print • Copy • Measure • Cross Sections • Etc

• Traceability Logs by Document





GPDIS_2015.ppt | 21

Windchill – External Demo

• Windchill Demo External Round Trip • Starts in Windchill • 3D PDF / Design Review

Template Created • PDF uploaded to secure

encrypted portal • PDF is Modified • PDF is Uploaded

back to Secure Portal • File is uploaded to

Windchill and Attributes populated





GPDIS_2015.ppt | 22

SmarTeam to Windchill

• SmarTeam to Windchill Demo (PDM to PDM DX)





GPDIS_2015.ppt | 23

Final Advice From the Field

• Start Today • Use Free Trials to get a feeling for what does and does not work for

your enterprise • Look for a mix of Hosted or Self Installed Options • Look for technology that integrates not only front end applications

(Outlook, Desktop, Mobile) but back end applications like PLM, ERP, Etc

• Low Hanging Fruit to go after for DX Security • Outlook • Desktop • Web Based

• Don’t forget about protecting your data once it leaves your enterprise. Getting it there is only part of the equation.

• Strip unneeded IP • Consider DRM solutions for when your data is in the wild.

• CONSIDER PRESENTATION 3173 at 11:40am Room 3, for a detailed use case example from The Nordam Group (Aerospace Supplier).





GPDIS_2015.ppt | 24

Company Overview

Shareholders

Over 22 years experience with engineering interoperability, migration, intelligent documents, benchmarking, more

Approximately 250 employees and consultants

based from international locations throughout Europe and in North America

More than 500 Customers that are leading companies across most industries

A vendor neutral / independent engineering services and software company since 1993

[email protected] / 8-PROSTEP01

Reseller





GPDIS_2015.ppt | 25

Our Customers

Automotive OEMs Aerospace Industry

Automotive Suppliers Shipbuilding

Engineering, Plant Construction

Electrical/Electronics Other Sectors





GPDIS_2015.ppt | 26

Questions:





GPDIS_2015.ppt | 27

Thank you!